An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.
{
"binaries": [
{
"binary_version": "2:8.1.1-0ubuntu3",
"binary_name": "cinder-api"
},
{
"binary_version": "2:8.1.1-0ubuntu3",
"binary_name": "cinder-backup"
},
{
"binary_version": "2:8.1.1-0ubuntu3",
"binary_name": "cinder-common"
},
{
"binary_version": "2:8.1.1-0ubuntu3",
"binary_name": "cinder-scheduler"
},
{
"binary_version": "2:8.1.1-0ubuntu3",
"binary_name": "cinder-volume"
},
{
"binary_version": "2:8.1.1-0ubuntu3",
"binary_name": "python-cinder"
}
]
}{
"binaries": [
{
"binary_version": "2:12.0.10-0ubuntu2.2",
"binary_name": "cinder-api"
},
{
"binary_version": "2:12.0.10-0ubuntu2.2",
"binary_name": "cinder-backup"
},
{
"binary_version": "2:12.0.10-0ubuntu2.2",
"binary_name": "cinder-common"
},
{
"binary_version": "2:12.0.10-0ubuntu2.2",
"binary_name": "cinder-scheduler"
},
{
"binary_version": "2:12.0.10-0ubuntu2.2",
"binary_name": "cinder-volume"
},
{
"binary_version": "2:12.0.10-0ubuntu2.2",
"binary_name": "python-cinder"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-ajax-console-proxy"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-api"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-api-metadata"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-api-os-compute"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-api-os-volume"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-cells"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-common"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-compute"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-compute-kvm"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-compute-libvirt"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-compute-lxc"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-compute-qemu"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-compute-vmware"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-compute-xen"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-conductor"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-console"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-consoleauth"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-network"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-novncproxy"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-placement-api"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-scheduler"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-serialproxy"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-spiceproxy"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-volume"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "nova-xvpvncproxy"
},
{
"binary_version": "2:17.0.13-0ubuntu5.2",
"binary_name": "python-nova"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "2:16.4.2-0ubuntu2.1",
"binary_name": "cinder-api"
},
{
"binary_version": "2:16.4.2-0ubuntu2.1",
"binary_name": "cinder-backup"
},
{
"binary_version": "2:16.4.2-0ubuntu2.1",
"binary_name": "cinder-common"
},
{
"binary_version": "2:16.4.2-0ubuntu2.1",
"binary_name": "cinder-scheduler"
},
{
"binary_version": "2:16.4.2-0ubuntu2.1",
"binary_name": "cinder-volume"
},
{
"binary_version": "2:16.4.2-0ubuntu2.1",
"binary_name": "python3-cinder"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "2:20.2.0-0ubuntu1.1",
"binary_name": "glance"
},
{
"binary_version": "2:20.2.0-0ubuntu1.1",
"binary_name": "glance-api"
},
{
"binary_version": "2:20.2.0-0ubuntu1.1",
"binary_name": "glance-common"
},
{
"binary_version": "2:20.2.0-0ubuntu1.1",
"binary_name": "python3-glance"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-ajax-console-proxy"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-api"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-api-metadata"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-api-os-compute"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-api-os-volume"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-cells"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-common"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-compute"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-compute-kvm"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-compute-libvirt"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-compute-lxc"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-compute-qemu"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-compute-vmware"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-compute-xen"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-conductor"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-novncproxy"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-scheduler"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-serialproxy"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-spiceproxy"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "nova-volume"
},
{
"binary_version": "2:21.2.4-0ubuntu2.1",
"binary_name": "python3-nova"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "2:20.1.0-0ubuntu1",
"binary_name": "cinder-api"
},
{
"binary_version": "2:20.1.0-0ubuntu1",
"binary_name": "cinder-backup"
},
{
"binary_version": "2:20.1.0-0ubuntu1",
"binary_name": "cinder-common"
},
{
"binary_version": "2:20.1.0-0ubuntu1",
"binary_name": "cinder-scheduler"
},
{
"binary_version": "2:20.1.0-0ubuntu1",
"binary_name": "cinder-volume"
},
{
"binary_version": "2:20.1.0-0ubuntu1",
"binary_name": "python3-cinder"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "2:24.1.0-0ubuntu1.1",
"binary_name": "glance"
},
{
"binary_version": "2:24.1.0-0ubuntu1.1",
"binary_name": "glance-api"
},
{
"binary_version": "2:24.1.0-0ubuntu1.1",
"binary_name": "glance-common"
},
{
"binary_version": "2:24.1.0-0ubuntu1.1",
"binary_name": "python3-glance"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-ajax-console-proxy"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-api"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-api-metadata"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-api-os-compute"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-api-os-volume"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-cells"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-common"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-compute"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-compute-ironic"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-compute-kvm"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-compute-libvirt"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-compute-lxc"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-compute-qemu"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-compute-vmware"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-compute-xen"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-conductor"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-novncproxy"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-scheduler"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-serialproxy"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-spiceproxy"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "nova-volume"
},
{
"binary_version": "3:25.1.0-0ubuntu1",
"binary_name": "python3-nova"
}
],
"availability": "No subscription required"
}{
"binaries": [
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-ajax-console-proxy"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-api"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-api-metadata"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-api-os-compute"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-api-os-volume"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-cells"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-cert"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-common"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-compute"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-compute-kvm"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-compute-libvirt"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-compute-lxc"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-compute-qemu"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-compute-vmware"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-compute-xen"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-conductor"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-console"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-consoleauth"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-network"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-novncproxy"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-scheduler"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-serialproxy"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-spiceproxy"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-volume"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "nova-xvpvncproxy"
},
{
"binary_version": "2:13.1.4-0ubuntu4.5+esm1",
"binary_name": "python-nova"
}
]
}